CVE-2026-60002

Опубликовано: 09 июл. 2026

Источник: msrc

CVSS3: 7.7

EPSS Низкий

Описание

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 18%

0.00263

Низкий

7.7 High

CVSS3

Связанные уязвимости

CVE-2026-60002

CVSS3: 7.7

ubuntu

25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

redhat

25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

nvd

25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVE-2026-60002

CVSS3: 7.7

debian

25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server cha ...

GHSA-gp5v-jg37-fvg6

CVSS3: 7.7

github

25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 18%

0.00263

Низкий

7.7 High

CVSS3